CVE-1999-1575

The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb.ocx), (5) Image Admin (imgadmin.ocx), (6) HHOpen (hhopen.ocx), (7) Registration Wizard (regwizc.dll), and (8) IE Active Setup (setupctl.dll) ActiveX controls for Internet Explorer (IE) 4.01 and 5.0 are marked as "Safe for Scripting," which allows remote attackers to create and modify files and execute arbitrary commands.

CVSS v2.0 5.1 MEDIUM

5.1^/10

CVSS v2.0 : MEDIUM

Vector : AV:N/AC:H/Au:N/C:P/I:P/A:P

Exploitability : 4.9 / Impact : 6.4

Access Vector NETWORK

Access Complexity HIGH

Authentication NONE

Confidentiality Impact PARTIAL

Integrity Impact PARTIAL

Availability Impact PARTIAL

References

Link	Resource
http://www.securityfocus.com/archive/1/28719	Exploit
http://www.kb.cert.org/vuls/id/23412	US Government Resource
http://www.kb.cert.org/vuls/id/24839	US Government Resource
http://www.kb.cert.org/vuls/id/26924	US Government Resource
http://www.kb.cert.org/vuls/id/41408	US Government Resource
http://www.kb.cert.org/vuls/id/9162	US Government Resource
https://exchange.xforce.ibmcloud.com/vulnerabilities/7097
https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-037

Advertisement

Configurations

Configuration 1 (hide)

OR	cpe:2.3:a:microsoft:internet_explorer:5.0:::::::*
	cpe:2.3:a:microsoft:internet_explorer:4.0.1:::::::*

Information

Published : 1999-09-09 21:00

Updated : 2021-07-22 07:02

NVD link : CVE-1999-1575

Mitre link : CVE-1999-1575

JSON object : View

CWE

NVD-CWE-Other

Advertisement

Products Affected

microsoft

internet_explorer

{"cve": {"data_type": "CVE", "references": {"reference_data": [{"url": "http://www.securityfocus.com/archive/1/28719", "name": "19990924 Several ActiveX Buffer Overruns", "tags": ["Exploit"], "refsource": "BUGTRAQ"}, {"url": "http://www.kb.cert.org/vuls/id/23412", "name": "VU#23412", "tags": ["US Government Resource"], "refsource": "CERT-VN"}, {"url": "http://www.kb.cert.org/vuls/id/24839", "name": "VU#24839", "tags": ["US Government Resource"], "refsource": "CERT-VN"}, {"url": "http://www.kb.cert.org/vuls/id/26924", "name": "VU#26924", "tags": ["US Government Resource"], "refsource": "CERT-VN"}, {"url": "http://www.kb.cert.org/vuls/id/41408", "name": "VU#41408", "tags": ["US Government Resource"], "refsource": "CERT-VN"}, {"url": "http://www.kb.cert.org/vuls/id/9162", "name": "VU#9162", "tags": ["US Government Resource"], "refsource": "CERT-VN"}, {"url": "https://exchange.xforce.ibmcloud.com/vulnerabilities/7097", "name": "wang-kodak-activex-control(7097)", "tags": [], "refsource": "XF"}, {"url": "https://docs.microsoft.com/en-us/security-updates/securitybulletins/1999/ms99-037", "name": "MS99-037", "tags": [], "refsource": "MS"}]}, "data_format": "MITRE", "description": {"description_data": [{"lang": "en", "value": "The Kodak/Wang (1) Image Edit (imgedit.ocx), (2) Image Annotation (imgedit.ocx), (3) Image Scan (imgscan.ocx), (4) Thumbnail Image (imgthumb.ocx), (5) Image Admin (imgadmin.ocx), (6) HHOpen (hhopen.ocx), (7) Registration Wizard (regwizc.dll), and (8) IE Active Setup (setupctl.dll) ActiveX controls for Internet Explorer (IE) 4.01 and 5.0 are marked as \"Safe for Scripting,\" which allows remote attackers to create and modify files and execute arbitrary commands."}]}, "problemtype": {"problemtype_data": [{"description": [{"lang": "en", "value": "NVD-CWE-Other"}]}]}, "data_version": "4.0", "CVE_data_meta": {"ID": "CVE-1999-1575", "ASSIGNER": "cve@mitre.org"}}, "impact": {"baseMetricV2": {"cvssV2": {"version": "2.0", "baseScore": 5.1, "accessVector": "NETWORK", "vectorString": "AV:N/AC:H/Au:N/C:P/I:P/A:P", "authentication": "NONE", "integrityImpact": "PARTIAL", "accessComplexity": "HIGH", "availabilityImpact": "PARTIAL", "confidentialityImpact": "PARTIAL"}, "severity": "MEDIUM", "impactScore": 6.4, "obtainAllPrivilege": false, "exploitabilityScore": 4.9, "obtainUserPrivilege": false, "obtainOtherPrivilege": false, "userInteractionRequired": true}}, "publishedDate": "1999-09-10T04:00Z", "configurations": {"nodes": [{"children": [], "operator": "OR", "cpe_match": [{"cpe23Uri": "cpe:2.3:a:microsoft:internet_explorer:5.0:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}, {"cpe23Uri": "cpe:2.3:a:microsoft:internet_explorer:4.0.1:*:*:*:*:*:*:*", "cpe_name": [], "vulnerable": true}]}], "CVE_data_version": "4.0"}, "lastModifiedDate": "2021-07-22T14:02Z"}